Here is a list of must-reads for API Security: